If you discover any security vulnerability or exposed keys, please report it immediately to our security email list instead of opening a public issue tracker. We strive to triage and release patches promptly.